Freedom of Information and Protection of Privacy Act (FIPPA)

Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA) gives individuals a right of access to records held in hospital’s custody or control. As of January 1, 2012, Humber River Health became subject to the Act.

Humber River Health is committed to conducting its business in a manner that promotes transparency and accountability. It is the practice of HRH, in keeping with FIPPA, to make its operational records publically available wherever possible. However, there are certain exclusions and exemptions from the right of access such as the right to the protection of personal information.

Making an FOI Request

To make an access request for general records or for records of personal information held by HRH, please fill out the Freedom of Information Request Form. You must clearly describe the records you are requesting.

Please note that only written FOI requests are accepted. You can use our form, or write a letter. If you write your own letter, it must state that you are making the request under FIPPA and it must addressed to Humber River Health.

The Privacy Office will respond to your request within 30 calendar days.

Completed forms should be sent to:

Humber River Health
Health Information Services – FOI Office
1235 Wilson Avenue
Toronto, Ontario M3M 0B2

Your request must be accompanied by a $5.00 application fee payable by cheque or money order to the order of Humber River Health. Please do not send cash in the mail.


Privacy Office
Phone: 416-242-1000 ext. 82303
Fax: 416-242-1085

External Links

The Directory of Records contains a list of the general classes of the types of records in the custody or under the control of Humber River Health. Its purpose is to assist members of the public in exercising their rights of access under the Freedom of Information and Protection of Privacy Act (FIPPA) by listing and describing the hospital’s records holdings.

Please note that the Directory does not contain actual records and that a Freedom of Information Request Form must be submitted to the Privacy Office if any information is required.

The following is a description of the information provided in the Directory and each general class of records and personal information banks:

General Classes of Records (GCR)

For each class of General Records, the Directory provides:

  • The title of the type or class of records
  • A description of the type of information maintained
  • The department responsible for maintaining the records
  • Retention and disposal timeframes (how long the records are kept)

Personal Information Banks (PIB)

For each PIB, the Directory provides:

  • The title of the PIB
  • A description of the type of information maintained
  • Legal authority for collection of the personal information
  • Types of personal information maintained (ex. names, contact information)
  • Record uses (how the information is normally used)
  • Categories of users (individuals who would have access on a regular basis)
  • Categories of individuals in bank (the categories of individuals about whom the personal information is maintained)
  • Retention and disposal (how long the information is kept)

In some cases, a record may qualify as both a GCR and a PIB because the general record includes a small amount of personal information. The record type listed will then have both “GCR” and “PIB” next to it in the Directory to indicate that the record includes both general and personal information.